CVE-2025-26511
1 advisory.
Maven/com.instaclustr:cassandra-lucene-index-plugin CVE-2025-26511: high 8.8, EPSS 0.57%
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC
Action: Upgrade com.instaclustr:cassandra-lucene-index-plugin to 4.0.17-1.0.0 (4.0.x) or 4.1.8-1.0.1 (4.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0-rc1-1.0.0 | 4.0.17-1.0.0 | - |
| 4.1.0-1.0.0 | 4.1.8-1.0.1 | - |
Fixed versions
| 4.0.17-1.0.0 | 4.1.8-1.0.1 |
Sources
- osv: GHSA-mrqp-q7vx-v2cx
- https://github.com/instaclustr/cassandra-lucene-index/security/advisories/GHSA-mrqp-q7vx-v2cx
- https://nvd.nist.gov/vuln/detail/CVE-2025-26511
- https://github.com/instaclustr/cassandra-lucene-index/commit/44ab4b639c9354a6335f40b1cf6178c745c6e101
- https://github.com/instaclustr/cassandra-lucene-index/commit/94380b165bd3e597d3e22e47f8cc674ec7c7bf7f
- https://github.com/instaclustr/cassandra-lucene-index
CVE-2025-26511 · published · modified · JSON